"If someone has physical access to your hardware then they can get access to all of your unencrypted data if they really want it. However, a firmware password would probably prevent someone from emailing you from your own account a couple of hours after they've stolen your laptop."